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SECURITY MANAGEMENT PLAN 


A. Mission EC 01.01.01 EP4 
The Baystate Medical Center Security Management Plan describes the methods of providing 
security for people, equipment, and other materials through risk assessment and management for 
Baystate Medical Center. Security incidents are often intentional. Security protects individuals 
and property against harm or loss, including workplace violence, theft, infant abduction, and 
unrestricted access to medications. Security incidents are caused by individuals from either 
outside or inside the organization. All Managers and staff are charged with the responsibility for 
contributing to the security effort through their actions and in reporting any condition or event 
which would compromise hospital security to the on-duty security officers. 
Scope 
This plan applies to Baystate Medical Center and to all sites that operate under its license. 


B. Objectives 


The Objectives for the Security Program are developed from information gathered during 
routine and special risk assessment activities, annual evaluation of the previous year’s program 
activities, performance measures, and environmental rounds. The objectives for this plan are: 

e Provide and document adequate security rounds. 


e Workplace safety training programs available (verbal de- escalation training, CPI 
blended program, R.A.D. self-defense and A.L.I.C.E. response to active shooter). 

e Work with departments so that staff knows how to report a Security Incident. 

e Workplace safety program and training for staff and how to file Workplace violence 
SRS report and support programs available to them. 

e Provide staff with other areas security can provide support (personal safety, 
domestic violence, harassment protection orders). 


D. Authority & Responsibilities 


The Baystate Medical Center Board of Trustees receives regular reports of the activities of the 
Security Program from the Safety Committee which is responsible for the Physical 
Environment issues. They review reports and, as appropriate, communicate concerns about 
identified issues and regulatory compliance. They also provide financial and administrative 
support to facilitate the ongoing activities of the Security Program. 


The Chief Operating Officer or other designated leader collaborates with the Senior 
Director of Security to establish operating and capital budgets for the Security Program. 


The Senior Director of Security, in collaboration with the Safety Committee, is responsible for 
monitoring all aspects of the Security Program. The Senior Director of Security advises the 
Safety Committee regarding security issues which may necessitate changes to policies and 
procedures, orientation or education, or expenditure of funds. 


Department Managers are responsible for orienting new staff members to the department and as 
appropriate, to job and task specific security procedures. In collaboration with Security, they are 


also responsible for the investigation of incidents occurring in their departments. When 
necessary the security officer provides department managers with assistance in developing 
department security programs or policies. 


Individual staff members are responsible for learning and following job and task specific 
procedures for secure operations. 


E. Annual Evaluation EC 04.04.01 EP 15 


On an annual basis, Baystate Medical Center develops, maintains, evaluates the effectiveness 
of the Security Management Plan to effectively manage the security risk of the staff, visitors, 
and patients. The Senior Director of Security is responsible for the Security Management Plan 
in accordance with CO 11.160. 


F. Performance Activities 
The performance measurement process is one part of the evaluation of the effectiveness of the 


Security Program. Performance measures have been established to measure important aspects 
of the Security Program. 


The performance measure for the Baystate Medical Center Security Program is: 
e Staff Knowledge: How to report a security incident. 

e Provide and document adequate Security rounds 

e Further enhance the workplace safety program and staff training 


G. Process for Managing Security Risks 
1. Security Risk Assessment EC 02. 01.01 EP1 
The Senior Director of Security manages the security risk assessment process for the hospital, 
and offsite facilities. This individual is designated to manage risk, coordinate risk reduction 
activities in the physical environment, collect deficiency information, and disseminate 
summaries of actions and results. The Senior Director of Security satisfies compliance with 
applicable codes and regulations. The Senior Director of Security develops and maintains the 
Security Management Plan. On an annual basis, he/she evaluates the scope, objectives, 
performance, and effectiveness of the Plan to manage the security risk of the staff, visitors, 
and patients. 


The assessment of the hospital identifies security risks associated with the environment of care. 
Risks are identified from internal sources such as ongoing monitoring of the environment, 
results of root cause analyses, results of annual proactive risk assessment of high-risk 
processes, and from credible external sources such as Sentinel Event Alerts. 


The risk assessments are used to evaluate the impact of the environment of care on the ability of 
the hospitals to perform clinical and business activities. The impact may include disruption of 
normal functions or injury to individuals. The assessment will evaluate the risk from a variety of 
functions including structure of the environment, the performance of everyday tasks, workplace 
violence, theft, infant abduction, and unrestricted access to medications. 


2. Use of Risk Assessment Results EC 02. 01.01 EP3 

A risk assessment is used to evaluate the impact of the environment of care on the ability of 
the hospital to perform clinical and business activities. Where risks are identified, the current 
programs and processes to manage those risks are compared to the risks that have been 
identified. Where the identified risks are not appropriately handled, action must be taken to 
eliminate or minimize the risk. The actions may include creating new programs, processes, 
procedures, and training programs. Monitoring programs may be developed to assure the risks 
have been controlled to achieve the lowest potential for adverse impact on the security of 
patients, staff, and visitors. 


Annually, the Senior Director of Security submits to the Chief Operating Officer a risk 
assessment that examines current areas of vulnerability and risk and evaluates these against 
existing countermeasures. This assessment considers external as well as internal events and 
incidents and services provided. The recommendations for policy, procedure or other changes 
to operations are then presented on the areas that require improvement or which exceed the 
current resource capability of the department. This document also serves as a basis for the 
capital budget submissions for the department. 


3. Identification Program EC 02.01.01 EP 7 

The Security Department coordinates the photo identification program. Human Resources, 
Security, and all supervisory personnel manage enforcement of the identification program. 
Hospital administration maintains policies for identification of patients, staff, and vendors. All 
employees are required to display an identification badge on their upper body while on duty. 
Identification badges are to be displayed on the individual with the picture showing. Personnel 
who fail to properly display their identification badge are counseled individually by their 
Department Manager. Identification badges are retrieved from personnel upon termination. 
Identification badges for those forward-facing patient positions have had the last names 
removed as part of Workplace Safety Committee initiative. 


ID cards are issued to all employees and carry name, title, licenses, and department. There are 
specific badge types issued to staff whose duties require them to handle infants and for 
pediatric staff so that parents can easily identify those caregivers as part of those Security 
Plans. The detailed plan for the dealing of infants and children is found in the Women and 
Infants policy manual. 

In addition, specific color cards are issued to contractors and external reviewers to aid in the 
identification of those groups. Cards for temporary, contractors, nursing students and some 
vendor like groups are also identified and, where appropriate, given expiration dates. Lost 
badges must be reported, and replacements are made for a nominal fee at the Security 
Department. Detailed procedures regarding the issuance of badges are contained in the 
Security Department policy manual and under the Photo Identification Policy and HR Policy 
HR-901. 


Visitors to patients are issued identification badges after 8 pm. Emergency Department visitor 
badges are issued 24/7 at the Springfield campus. The Security Officers assist in enforcement of 
visitor identification policies. 


Where required the patient identification is provided at the nursing unit where patients are 


first admitted. If a patient wristband is damaged, it is replaced by the nursing staff. Patient 
identification is not removed upon discharge. Patients are instructed to remove the 
identification badge at home. 


The Security Department provides some temporary vendor and contractor identification. 
Identification badges are controlled and stored in a secure area. (Corporate vendors use Reptrax 
system which are in common entry points. 


4. Sensitive Areas EC 02 .01.01 EP 7, 8 

The Senior Security Director works with leadership to identify security sensitive areas by 
utilizing risk assessments and analysis of incident reports. Sensitive areas encompass those 
with risk associated with funds handling, challenging patient populations or narcotics. The 
risk is addressed for each area through a combination of design features, technology, security 
presence, and staff awareness and education. 


There have been design standards that have been implemented for many of the sensitive areas 
in the Health System. Chief among these is the design for access control for these designated 
security sensitive areas in all regions. The security sensitive area identified at Baystate 
Medical Center are Emergency Department, Behavioral Health, Labor and Delivery/Peds, 
and the Pharmacy. Card access is standard in these areas. Sensitive patient areas such as 
LDRP and Pediatrics have badge systems to aid in the identification and control of people. 


The Senior Security Director coordinates the development of hospital-wide written security 
policies and procedures and aids Department Managers in development of departmental 
security procedures, as requested. These policies and procedures include infant and pediatric 
abduction, workplace violence, and other events that are caused by individuals from either 
inside or outside the hospital. 


Individual Department Managers assist in the development of department specific security 
policies and procedures for risk unique to their area of responsibility. The Senior Security 
Director also assists Department Managers in the development of new department security 
procedures with special focus on identified security sensitive areas. Hospital-wide security 
policies and procedures are distributed to all departments. 

Department Managers are responsible for distribution of department level policies and 
procedures to their staff and for ensuring enforcement of security policies and procedures. 
Each staff member is responsible for following security policies and procedures. 


Hospital-wide and departmental security policies and procedures are reviewed through the 
Safety Committee. Additional interim reviews may be performed on an as needed basis. The 
Safety Committee coordinates policy review. 


5. Security Incident Procedures EC 02.01.01 EP 9, EC 04.01.01 EP 5,6 

The Senior Director of Security coordinates the development of organization-wide written 
security policies and procedures and aids Department Managers in development of 
departmental security procedures, as requested. These policies and procedures include infant 
and pediatric abduction, workplace violence, and other events that are caused by individuals 
from either inside or outside the organization. 


An automated incident report system is the basis for all reporting activities. This system is 


web based and is available to all security officers at any location around the organization. The 
system provides the base data from which trends are determined. All types of activity 
performed by the department are recorded in this system. 


Documentation is also maintained on open workplace violence issues regarding Domestic 
Violence cases. This information is maintained by the department investigator and updated for 
distribution to security supervisors and charge officers monthly or as changes to the orders 
occur. 


The investigator at Baystate Medical Center and the Security Supervisors collaborate to 
review all open cases and assesses them for trends and leads. A case file is initiated and leads 
pursued until resolution or close out. Each case is reviewed with the Security Manager and or 
Senior Director of Security and results presented to the appropriate manager. In the case of a 
patient, communication is directly with the Unit Manager and the Patient and Guest Relations 
office. 


In the event of a child reported missing, a Code Orange lock down announced over the internal 
page system. Staff responds to doors and specified areas to observe for persons with children 
or packages and calls Security if such cases occur. 


Following any security incident, a written “Security Incident Report” will be filed by the 
security officer managing the incident. The report will be reviewed by the security supervisor 
and security manager. Any deficiencies identified in the report will be corrected. A summary of 
these Reports will be furnished to the Safety Committee on a regular basis. 


6. Security Incident Response EC 02. 01.01 EP 10 

Upon notification of a security incident, the Security Officer will assess the situation and 
implement the appropriate response procedures. The Security Officer will notify 
Administration, if necessary, to obtain additional support. Security incidents that occur in the 
Emergency Department will be managed initially by the officer on duty by following the 
appropriate policies and procedures for that area. The security officer will be notified about the 
incident as soon as possible and in turn will apprise the security supervisor or charge person of 
the shift 


Security incidents that occur in the departments will be managed according to the departmental 
or facility-wide policy. The Security Department will be notified about any incident that occurs 
in a department as soon as possible. Additional support will be provided from the Security 
Department. 


Security Organization 


Staffing and Development 


The Security Department is organized around the concept of protection in depth. Layers of protection 
are designed for the institution in general and for specific departments of high sensitivity. The design is 


based on the recognized need for a specific approach where there are inpatient populations and an area 
approach for clinics and other sites. 


The proprietary uniformed security force is deployed on three fixed shifts. The Springfield Campus 
has posts at the following locations depending on the time of day and the day of the week. Those 
noted with an asterisk* are always staffed 

Command Center* 

Emergency Department (4) 

Wesson Lobby* 

Mobile Patrols* 

Interior Roving* 

Daly Lobby* 

Mass Mutual building* 


Satellite Locations are staffed as follows 
280 Chestnut St. - 6am-6pm - Monday-Friday 
3300 Main St. - 7am-3:30pm Monday-Friday, 5pm-9:30pm-Monday-Friday, Sat 7am- 
lpm, , Sunday 7am-2pm 
Brightwood — 7am—Spm - Mon/Wed/Fri; 7am-8pm - Tues/Thurs 
Northern Edge Patrol - 7am-11:30pm- Monday-Friday- on weekends and overnight shift 
this becomes part of the Mobile patrol. 
Mason Square - Mon/Tues/Fri- 7am-6pm; Wed/Thurs — 7am-8pm. 
140 High St. - 7am-7pm - Mon-Friday. There may be an occasion they may be open later 
depending on patient volume, if so, we assign an officer until closing on those days. 
The deployment allows for maximum visibility of officers at key locations and provides rapid response 
to areas not staffed on a full-time basis. 


Manager- the department has a manger that is responsible to day-to-day operations of the Baystate 
Medical Center Security Department. In addition, the manager is also responsible for various security 
systems deployed in the department that include (CCTV, Access Control, and Infant Security and 
Reporting Systems). The Manager at Baystate Medical Center has dotted line responsibilities for the 
Baystate Wing Hospital Security Department in respect to recruitment, hiring and training of all 
current and new staff at these locations. 


Investigator 
The department has one investigator who handles all investigations of criminal or potential criminal 


activity in Springfield. He assists in regional locations on an as needed basis. In addition, the 
Investigator conducts crisis intervention training, monitors electronic systems in the department, and is 
the principal law enforcement liaison for the department. When needed the Investigator has assisted 
with narcotics diversion and other cases at the regional community hospitals. 


Locksmith 

The locksmith provides key making and lock installation/repair services for all Baystate Medical 
Center based activities in Springfield and surrounding clinic locations. The locksmith also consults on 
new projects and major renovations. 

The locksmith administers the key control program for the department and monitors key control 


activities in major departments. The locksmith supports the uniformed officers at the direction of the 
dayshift supervisor as needed at Baystate Medical Center. 


Parking and Transportation Manager 
The Parking and Transportation Manager oversees the drivers of the shuttle operation for both 


employee lots and well as the intercampus shuttle service. Although not active security responders, 
the drivers use their communications capability to provide information related to a wide variety of 
incidents. This position also oversees parking enforcement and valet services around the campus. 
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Facility Control Measures- Baystate Medical Center 


Access 

Routine access to the Medical Center is handled through the main entrances of the Daly, Wesson, and 
Chestnut buildings. During the normal business day there are no restrictions on access to the Medical 
Center through those entrances. The only limitations placed on patients and visitors would be in the 
case of a specific circumstance that had been brought to the attention of the Security Department and 
for which a procedure had been implemented. 

Note: During the past year (2022) access was restricted due to the worldwide pandemic so we only 
allowed visitors 2 at a time between 8am-8pm (as of November 2022) through either the Daly or 
Wesson entrances for a designated period of time. 


There are restricted access points at the laundry/loading dock for Springfield, Chestnut, and Daly. 
Entrances are generally open from 5am-8pm. In addition, the ED, Daly, and Wesson lobbies are open 
24 hours a day. The Daly, Mass Mutual and Wesson interior lobbies are secured from the rest of the 
hospital at 8pm daily and reopened at Sam. The doors on the north campus and satellites are card 
reader controlled and on time zone for opening and closing. 

Visitor passes are used at the Daly/Mass Mutual and Wesson lobbies after 8 pm and 24 hours a day in 
the Emergency Department. Persons desiring to visit after 8 pm will be approved for entry by unit 
staff before they can visit. For those visiting in the ED, approval is needed for all visitors 24 hours a 
day. 

Note: We did leave lobby doors secured 24 /7 in 2021-2022 due to the pandemic to restrict access to 
protect patients and staff. 


Media 
Media representatives who wish access to the Medical Center as part of their business must coordinate 
with the Public Affairs Department before access can be granted. 


Law Enforcement 
Law enforcement authorities are requested to coordinate visits through the Security Department so 
access to patients and staff can be appropriately facilitated. 


Vehicle Control 

Parking for employees is assigned and controlled through the issue of decals to offsite commuter lots. 
On campus parking is restricted to employees who have medical, or business need to park on campus. 
There is on campus parking for Director and above positions. Staff is assigned individually to 
locations in accordance with HR Policy 903. 


The directional valet attendant assigned to the Emergency Department assists with traffic control in an 
around the ED so that there is always access for ambulances and redirects drive up cases to the adult 
and or pediatric entrance depending on the patient. Vendors and students are not allowed to park on 
campus but are directed to appropriate lot. Attendees to meetings and conferences are assigned to park 
on the third level of the Daly garage. 


In the event of an emergency, the Security Department has developed procedures to shut down critical 
parking areas and, if need be, shut down access to the campus. This action would require screening 
those desiring access at the perimeter. Specific plans also exist as part of the Medical Center disaster 
plan to triage and decontaminate at the perimeter. This action would require the support of local 
authorities to assist security forces. 


Material and Equipment 

Material is received at the warehouse at Whitney Ave, /Bobola Road in Holyoke Ma, or at the 
loading docks at the Chestnut or Daly/Springfield buildings. Materials are received by Materials 
Management personnel. Emergency shipments via commercial express companies are to be delivered 
directly to the mail room on the north campus. If after hours delivery of an emergency item will be 
coordinated with Security to assist with getting the item to the correct department in a timely manner. 


Security Systems- Baystate Medical Center 


The security program employs a variety of systems as part of the overall protection plan. Officers all 
carry two-way radios and are dispatched from central Command Center. The hub of the system is the 
Premisys access control system. The access system controls exterior and interior doors on the north 
campus and the satellites clinics and business areas, regional hospitals, BMP Practices in various 
cities and towns. The closed-circuit camera coverage is provided at most of the same locations and 
recorded locally. There is an extensive network of personal alarm devices at areas where there is 
sensitivity. The HUGS infant alarm system is in place in the Wesson building on floors 1 and 2 
including the NICU, CCN, and the Pediatrics unit in the Daly building. We will be converting to the 
Cuddles platform in both locations in 2023 as HUGS will reach its end of life as of 2024. 


Assignment of Access Levels 
General access to the facility is based on position. This would include, as example, all physicians 


having access to outside card-controlled doors at the Springfield Building. Access levels for the 
individual areas are coordinated with the manager of the area for which access is requested. Access is 
not given without prior authorization. Periodically, lists of those authorized to enter areas are shared 
with the manager of the area to verify accuracy. It is the responsibility of the manager to notify 
security of any changes in access. 


Communication 

The Security Department uses a dedicated frequency for communications. Each officer carries a two- 
way radio while on duty. Each of the shuttle bus drivers also carries a radio. In the event of a power 
loss to the base radio, the repeater can be disconnected, and the radios operated point to point. 


There is also a Comnet radio and a Springfield Police radio in the Security Dispatch Center. The 
Comnet radio is a direct radio communication with the Springfield Police Dept. dispatch and can be 
used in the event of a serious event in progress to request police support. The Police radio is for 
monitoring activity in the city of Springfield only, this has made a significant improvement in 
preparing us for any issues around the hospital or clinic sites as well as expectation of potential 
patient arrivals that would require our support. 


There is a special help line in the Command Center for emergency calls. This is a priority line and 


will be answered in advance of any other. The line is reached by dialing 4HELP (4-4357) from any 
house phone and all lines are recorded. 


Closed Circuit TV 

CCTV is used extensively in conjunction with other systems. CCTV use for public areas of the 
hospital is planned by the Security Department and designed in conjunction with the CCTV Vendor. 
CCTV for specific applications is coordinated with the manager of the area to best fit the operational 
needs of the area to be protected. Covert operations using CCTV require the approval of the SVP 
Human Resources. 

We continue to add to our digital footprint. This will enhance our ability to monitor our facility both 
internally and externally. 


The camera system is used in three ways: dedicated monitoring, intermittent monitoring, and passive 
monitoring. There is limited dedicated monitoring of systems at BMC. Dedicated monitoring is limited 
to special operations and specific circumstances where activities in an area make it prudent to actively 
watch an area for short periods. Baystate Medical Center makes it a practice to record cameras and to 
intermittently watch areas of high interest or potential risk. 

The officer in the Command Center will follow the direction of the supervisor during the shift as to 
what areas should receive attention when that is possible. We have added an additional resource in 

this area to add to our ability to dedicated monitoring around the campus. 


Alarms 

Alarm systems are used extensively and are broken into three basic types. Intrusion systems provide 
perimeter and internal alarms will detect attempts to break in or remain behind in an area after 
business hours. Personal alarms are used to summon help to an area without the need to dial and tell 
someone about the problem. Infant and pediatric alarm systems are designed to alert staff to a 
potential abduction. 


Training and Education- Baystate Medical Center 


Security Staff 
All new staff enters a three-week training period as they enter the department. This covers all aspects 


of the department operations, performance standards, post orders, policies, and familiarity with the 
Medical Center. There is an annual in-service program that covers topics critical to the officer’s skill 
base. Topics include use of force, customer service, life safety, crisis intervention, domestic violence, 
and helicopter landing protocols. Instructors are drawn from Medical Center staff as well as the 
Springfield Police and Fire Departments. Each person also completes the mandatory safety education 
modules each year. In addition, opportunity training is conducted during the pre-shift briefings on 
policies and procedures, trends, and techniques for improving performance, and the like. 
Approximately thirty-eight officers and all supervisors are sworn Special Police Officers in the City 
of Springfield. We assigned our current Special Police Officers to attend the Bridge Academy and 
anyone going forward would need to attend a Full Time Police Academy to meet the new POST 
standards. There is an in-service program that is required annually for the Police positions on topics of 
First Responder /CPR, Use of Force and Legal updates to meet the requirements set forth by the City 
of Springfield Police Department taught by an MPTC Certified instructor for these positions. 
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Note: In 2020 a police reform bill was signed by the governor which changed how the special police 
program would change to Municipal Police officer. All officers who are currently Special police 
would need to attend a bridge academy to become certified police officers as the Special Police 
programs ends as of 2024. We have requested a change in our statutory authority to move from city 
to State Special Police (SSO) designation. Any future Officers would now be required to qualify 
and successfully complete a 20-week full time police academy. This State SSO designation would 
allow us to expand our program to the regional locations in Greenfield, Palmer, and Westfield. We 
received buy in from senior leaders to continue to explore this program. The Bridge academy 
provides additional training for our officers on Ma General Law, Defensive Tactics, firearms and 
EVOC training. 

Each shift has a field training officer who oversees the on boarding and training of each new Security 
officer and shares progress with the shift supervisor. 


Employees 
All employees receive an outline of the Security program and the expectation of staff during their 


initial orientation. Key points concerning the wearing of ID’s and individual responsibility of staff to 
support the program are covered. Annually, each employee is required to complete the assigned 
modules of the Safety Education Program. Employees each have a responsibility to report violations 
of security practices, criminal or suspicious activity, and other hazards. 
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